CVE-2026-6500

1th percentile - higher than 1% of all known CVEs

A plaintext storage of a password vulnerability in ILM Informatique OpenConcerto allows retrieval of embedded sensitive data. This issue affects OpenConcerto 1.7.5.

Anyone with access to the application's files or configuration can read the password in plaintext. This may lead to unauthorized access to protected resources.

Update OpenConcerto to a version containing the fix. Until then, restrict access to configuration files and application data, and consider rotating exposed passwords.